Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: P7Q7k+ut3mJzY2RdQX0Y+zylz05SyczTsmBIg74wUY4=
Subject key identifier: B7:77:46:3B:A6:91:A7:72:75:B4:BA:C9:86:3A:14:F0:84:16:58:F6
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019CAF7EAA4FCF7ED8FCFA5455FC3B6C2DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0CC3
Signing time: Mon 02 Mar 2026 17:00:39 +0000
Manifest this update: Mon 02 Mar 2026 17:00:39 +0000
Manifest next update: Tue 03 Mar 2026 17:00:39 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: 52QH2vxbizfa7Uaf6TG7tOsF3kq8xbeMl/cNPDVxRQU=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:aa:4f:cf:7e:d8:fc:fa:54:55:fc:3b:6c:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Mar 2 17:00:39 2026 GMT
Not After : Mar 3 17:00:39 2026 GMT
Subject: CN=b777463ba691a77275b4bac9863a14f0841658f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:ab:7e:88:21:70:61:6f:92:d1:d2:a3:25:
06:bf:10:8c:7b:33:59:be:68:32:f3:b4:b2:8a:93:
09:74:03:5d:50:cf:d9:38:be:c6:15:b1:da:e9:84:
8a:ab:0e:e3:2f:dc:20:39:1f:0d:f2:f3:0d:89:b4:
cc:62:93:b3:fd:eb:ad:df:8c:96:f6:8c:c8:f0:aa:
57:1f:b9:82:c5:71:e9:07:b1:45:b8:d1:9b:3c:13:
ef:d3:5b:d8:c3:4b:d4:3c:bb:8e:46:a8:95:8a:84:
a9:dc:05:a4:8c:b3:cd:2c:53:eb:1c:17:f6:8f:db:
cf:7a:7c:fb:03:e1:46:ba:3e:24:98:c0:96:bb:e0:
e8:b4:b6:51:61:7b:74:20:94:b2:18:4b:f1:7e:f0:
b0:27:a6:b1:99:ee:6c:ea:86:79:cd:0f:b7:8e:9f:
71:5f:73:2c:30:0e:b7:b1:fb:8b:fe:d2:c1:2b:97:
95:13:d4:85:6c:2a:61:37:c9:56:04:7c:1f:8a:6d:
0a:c4:6c:1b:25:e7:24:8d:f3:50:14:aa:85:68:fe:
cd:d4:e4:4b:88:26:a0:ac:53:1a:b1:ae:d3:88:86:
ba:88:5e:ae:52:67:9b:81:cb:b5:e2:86:f6:e4:f8:
fa:57:ce:0d:4b:24:d1:45:b6:66:9d:cd:d8:72:e1:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:46:3B:A6:91:A7:72:75:B4:BA:C9:86:3A:14:F0:84:16:58:F6
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:5d:c0:4b:f2:00:54:b4:47:cd:7a:7c:ea:88:fe:5c:4b:
ed:63:8f:39:80:fd:aa:d9:36:56:a2:0c:26:e3:e9:e1:bb:a7:
ea:99:5a:e1:e3:cc:cb:61:e7:b4:bf:dd:61:0a:b9:76:e2:f4:
89:66:ec:49:1d:27:be:69:01:62:41:65:e9:90:fb:c1:16:2c:
6c:bc:c3:7a:f1:63:48:06:6f:fc:1d:47:aa:eb:ec:34:62:c5:
fe:4b:c3:8b:9e:16:c9:52:e9:9b:81:9a:4e:b0:bc:82:16:40:
7f:5f:52:b6:e5:42:cd:77:b3:d7:b5:ef:db:f8:37:80:35:8a:
f1:e7:99:c9:dc:9a:3f:86:71:e0:87:26:31:91:9f:ef:cd:fb:
59:36:44:52:8a:03:f4:19:db:28:1a:15:f9:e1:92:64:df:ab:
54:43:83:19:96:ca:53:65:07:87:c2:60:70:9a:68:a2:32:ce:
6c:57:01:49:e7:0e:d4:fd:29:2a:ec:33:de:c6:95:fe:34:b9:
d0:29:79:13:88:e5:25:31:6e:fb:6d:38:d6:1a:6a:e8:69:1c:
70:57:7c:9d:f9:91:33:7d:4b:56:f9:43:85:f7:8d:7a:36:a3:
09:f6:e8:65:df:cb:e2:42:9b:c2:7d:a2:e7:7b:c1:d4:75:75:
67:b9:43:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvfqpPz37Y/PpUVfw7bC2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk
ZDliMjgwHhcNMjYwMzAyMTcwMDM5WhcNMjYwMzAzMTcwMDM5WjAzMTEwLwYDVQQD
EyhiNzc3NDYzYmE2OTFhNzcyNzViNGJhYzk4NjNhMTRmMDg0MTY1OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUGrfoghcGFvktHSoyUGvxCMezNZ
vmgy87SyipMJdANdUM/ZOL7GFbHa6YSKqw7jL9wgOR8N8vMNibTMYpOz/eut34yW
9ozI8KpXH7mCxXHpB7FFuNGbPBPv01vYw0vUPLuORqiVioSp3AWkjLPNLFPrHBf2
j9vPenz7A+FGuj4kmMCWu+DotLZRYXt0IJSyGEvxfvCwJ6axme5s6oZ5zQ+3jp9x
X3MsMA63sfuL/tLBK5eVE9SFbCphN8lWBHwfim0KxGwbJeckjfNQFKqFaP7N1ORL
iCagrFMasa7TiIa6iF6uUmebgcu14ob25Pj6V84NSyTRRbZmnc3YcuGgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd3RjumkadydbS6yYY6FPCEFlj2MB8GA1UdIwQY
MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt
OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj
LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX5dwEvy
AFS0R816fOqI/lxL7WOPOYD9qtk2VqIMJuPp4bun6pla4ePMy2HntL/dYQq5duL0
iWbsSR0nvmkBYkFl6ZD7wRYsbLzDevFjSAZv/B1HquvsNGLF/kvDi54WyVLpm4Ga
TrC8ghZAf19StuVCzXez17Xv2/g3gDWK8eeZydyaP4Zx4IcmMZGf7837WTZEUooD
9BnbKBoV+eGSZN+rVEODGZbKU2UHh8JgcJpoojLObFcBSecO1P0pKuwz3saV/jS5
0Cl5E4jlJTFu+2041hpq6GkccFd8nfmRM31LVvlDhfeNejajCfboZd/L4kKbwn2i
53vB1HV1Z7lDuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:35 2026 by rpki-client